Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/A90BA98C74D011F19600C7755BA30FBC.roa
File:                     A90BA98C74D011F19600C7755BA30FBC.roa (raw, json)
Hash identifier:          5g7W5ahRCXrfAoDmqnCGQYfrzLhobtl8/QoaS07b9B4=
Subject key identifier:   77:DB:C3:09:3E:0C:98:EE:00:7D:11:73:AE:92:9A:A9:65:6B:04:B8
Certificate issuer:       /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Certificate serial:       35CD
Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/A90BA98C74D011F19600C7755BA30FBC.roa
Signing time:             Tue 30 Jun 2026 22:11:36 +0000
ROA not before:           Tue 30 Jun 2026 22:11:36 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     59139
IP address blocks:        103.112.36.0/24 maxlen: 24
                          103.112.37.0/24 maxlen: 24
                          103.112.38.0/24 maxlen: 24
                          103.112.39.0/24 maxlen: 24
                          180.189.160.0/20 maxlen: 20
                          180.189.160.0/24 maxlen: 24
                          180.189.161.0/24 maxlen: 24
                          180.189.162.0/24 maxlen: 24
                          180.189.163.0/24 maxlen: 24
                          180.189.164.0/24 maxlen: 24
                          180.189.165.0/24 maxlen: 24
                          180.189.166.0/24 maxlen: 24
                          180.189.167.0/24 maxlen: 24
                          180.189.168.0/24 maxlen: 24
                          180.189.169.0/24 maxlen: 24
                          180.189.170.0/24 maxlen: 24
                          180.189.171.0/24 maxlen: 24
                          180.189.172.0/24 maxlen: 24
                          180.189.173.0/24 maxlen: 24
                          180.189.174.0/24 maxlen: 24
                          180.189.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
                          rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 14:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13773 (0x35cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
        Validity
            Not Before: Jun 30 22:11:36 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a443f18-67d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:90:a1:3e:f8:21:36:98:4a:9e:ad:27:32:
                    57:36:03:f4:ff:43:c3:21:2e:68:bd:5e:9e:bc:64:
                    39:73:b1:89:1c:c2:9b:13:29:fd:5e:70:7d:d6:50:
                    3d:98:0b:a4:50:20:da:ec:32:f8:c8:5a:4b:a8:dd:
                    9e:7b:f6:7e:69:1b:4f:18:26:4e:14:17:01:ec:50:
                    d2:7d:23:e3:d8:63:e4:4e:d0:7a:3b:4f:6a:e0:10:
                    22:9d:31:2b:f4:1e:db:f2:4e:4c:15:b6:a1:f2:2c:
                    36:89:c6:b6:7d:67:01:9e:03:ac:76:11:fc:21:10:
                    75:19:c7:c2:59:69:c1:33:9f:ca:32:67:b5:af:8a:
                    8e:e6:37:d8:7d:4c:f4:fa:65:1c:04:6c:76:27:66:
                    9c:dd:a8:9e:bc:a8:fa:5c:40:69:f2:33:e9:6f:df:
                    48:e2:20:f9:88:ab:27:db:e2:bd:11:38:59:4a:93:
                    c5:99:89:50:80:77:7b:4c:77:dd:92:b2:d1:a2:ec:
                    f1:2e:78:a3:d4:39:87:24:45:a2:67:3d:d3:b4:3e:
                    d7:d9:0d:a6:02:c7:b1:d8:aa:cf:7b:00:86:72:a7:
                    ba:d9:49:44:ce:55:09:cd:f7:cc:da:9b:1b:a7:7a:
                    83:bd:2a:c9:2c:cd:ca:7e:0c:1e:c7:75:c2:71:67:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DB:C3:09:3E:0C:98:EE:00:7D:11:73:AE:92:9A:A9:65:6B:04:B8
            X509v3 Authority Key Identifier:
                keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/A90BA98C74D011F19600C7755BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.36.0/22
                  180.189.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:1f:a8:3f:46:65:98:97:9e:98:91:d4:7f:cd:a4:db:0c:
         45:53:b9:31:c4:04:c7:35:4e:61:22:cc:e7:81:82:65:e9:08:
         58:94:7b:53:ad:fe:9b:13:dc:8b:fc:5c:bb:8d:ba:82:33:db:
         68:93:85:fb:35:0a:7d:1e:2a:64:28:6a:27:68:1a:99:15:b0:
         d4:59:60:4e:0c:6e:aa:a7:6f:3a:1b:51:8a:82:63:9a:77:29:
         7d:8e:e4:eb:a8:76:51:79:ab:82:7f:9c:d5:1b:6b:c4:9b:14:
         00:85:d2:f7:9b:6a:5e:37:99:31:21:91:0e:84:34:e1:a9:8e:
         eb:76:fa:53:40:31:c4:64:cc:d4:49:67:33:a9:fe:19:0b:b8:
         6b:49:95:cb:2a:cf:32:4c:0f:07:aa:1a:fa:4b:82:00:3d:cd:
         a3:f5:d0:a4:9e:bd:f0:1a:1c:50:06:8b:f3:83:a4:46:7f:e0:
         ca:dd:0e:f3:2b:50:1c:a3:cf:23:cf:9b:de:4d:3d:b0:a1:ca:
         f0:25:33:4b:08:1e:0a:e4:fe:87:d4:54:82:0c:cf:a0:d8:08:
         f0:23:7e:9b:1a:d8:1f:e1:ac:c5:61:c5:7c:80:72:8a:42:7f:
         d3:9d:7f:ca:6e:ab:ff:7c:8a:f3:5f:6b:cf:6b:e7:88:c5:70:
         a5:69:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:14:32 2026 by rpki-client